Germany charged a Syrian asylum-seeker with planning an IS-inspired suicide knife and bomb attack on Jewish targets in Berlin; the case reflects an active IS targeting pipeline for Jewish communities in Germany that is reinforced by concurrent German-language IS media distribution on TechHaven.

UAE State Security arrested members of an Iran-linked cell adhering to the Wilayat al-Faqih doctrine on April 20, disrupting a plot involving coordinated terrorist and sabotage attacks inside the UAE. The cell was recruiting Emirati youth and transferring funds abroad. A Hezbollah organizational link was also confirmed. The operation coincides with ceasefire expiry negotiations and illustrates sustained Iranian proxy network activity in GCC states.

HAYI, assessed as an Iranian intelligence front, claimed a drone attack with radioactive materials near the London Israeli Embassy on April 17. Kensington Gardens was closed and hazmat units deployed. No confirmed attack; embassy staff safe. Fourth Golders Green suspect charged. Old Bailey hearing April 24. US embassy facilities in Europe remain within the documented HAYI target pattern based on the Oslo and Paris operations.

The April 11 Nigerian Air Force strike on Jilli market in Borno killed between 56 and 200 civilians per varying estimates; the government defended the strike as intelligence-led and ordered a probe, but survivor accounts and the documented pattern of Nigerian Air Force civilian casualty incidents raise material questions for the AFRICOM advisory partnership.

HAYI has claimed multiple attacks against Jewish and US commercial targets across four European countries since March 2026, explicitly threatening broader operations against US and Israeli interests. Whether an Iranian proxy or opportunistic hybrid network, HAYI's gig-economy recruitment model and stated global ambitions represent a direct threat requiring immediate law enforcement coordination.

New IRA forced a civilian delivery driver at gunpoint to carry a viable device to Lurgan PSNI station on April 3; the attack failed but demonstrated operational capability and willingness to use proxy bomb tactics.